Malware analysis with graph kernels and support vector machines

被引:18
|
作者
Wagner, Cynthia [1 ]
Wagener, Gerard [1 ]
State, Radu [1 ]
Engel, Thomas [1 ]
机构
[1] Univ Luxembourg, FSTC, Secan Lab, L-1359 Luxembourg, Luxembourg
关键词
D O I
10.1109/MALWARE.2009.5403018
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
This paper addresses a fundamentally new method for analyzing the behavior of executed applications and sessions. We describe a modeling framework capable of representing relationships among processes belonging to the same session in an integrated way, as well as the information related to the underlying system calls executed. We leverage for this purpose graph-based kernels and Support Vector Machines (SVM) in order to classify either individually monitored applications or more comprehensive user sessions. Our approach can serve both as a host-level intrusion detection and application level monitoring and as an adaptive jail framework.
引用
收藏
页码:63 / 68
页数:6
相关论文
共 50 条
  • [31] Support Vector Machines with Composite Kernels for NonLinear systems Identification
    El Gonnouni, Amina
    Lyhyaoui, Abdelouahid
    El Jelali, Soufiane
    Martinez Ramon, Manel
    2008 INTERNATIONAL MULTICONFERENCE ON COMPUTER SCIENCE AND INFORMATION TECHNOLOGY (IMCSIT), VOLS 1 AND 2, 2008, : 99 - +
  • [32] Support Vector Machines with Weighted Powered Kernels for Data Classification
    Afif, Mohammed H.
    Hedar, Abdel-Rahman
    Hamid, Taysir H. Abdel
    Mahdy, Yousef B.
    ADVANCED MACHINE LEARNING TECHNOLOGIES AND APPLICATIONS, 2012, 322 : 369 - 378
  • [33] On global, local, mixed and neighborhood kernels for support vector machines
    Department of Computer Science, Tel Aviv University, 69978 Ramat Aviv, Israel
    Pattern Recognit Lett, 11-13 (1183-1190):
  • [34] Boolean kernels for rule based interpretation of support vector machines
    Polato, Mirko
    Aiolli, Fabio
    NEUROCOMPUTING, 2019, 342 : 113 - 124
  • [35] Learning Kernels for Support Vector Machines with Polynomial Powers of Sigmoid
    Fernandes, Silas E. N.
    Pilastri, Andre Luiz
    Pereira, Luis A. M.
    Pires, Rafael G.
    Papa, Joao P.
    2014 27TH SIBGRAPI CONFERENCE ON GRAPHICS, PATTERNS AND IMAGES (SIBGRAPI), 2014, : 259 - 265
  • [36] Fast rates for support vector machines using gaussian kernels'
    Steinwart, Ingo
    Scovel, Clint
    ANNALS OF STATISTICS, 2007, 35 (02): : 575 - 607
  • [37] Data classification using support vector machines with mixture kernels
    Wei, Liwei
    Wei, Chuanshen
    Wan, Xiaqing
    NANOTECHNOLOGY AND PRECISION ENGINEERING, PTS 1 AND 2, 2013, 662 : 936 - +
  • [38] Evaluating Support Vector Machines with Multiple Kernels by Random Search
    Abe, Shigeo
    ARTIFICIAL NEURAL NETWORKS IN PATTERN RECOGNITION, ANNPR 2024, 2024, 15154 : 61 - 72
  • [39] On global, local, mixed and neighborhood kernels for support vector machines
    Brailovsky, VL
    Barzilay, O
    Shahave, R
    PATTERN RECOGNITION LETTERS, 1999, 20 (11-13) : 1183 - 1190
  • [40] Analysis of detectors for support vector machines and least square support vector machines
    Kuh, A
    PROCEEDING OF THE 2002 INTERNATIONAL JOINT CONFERENCE ON NEURAL NETWORKS, VOLS 1-3, 2002, : 1075 - 1079